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DETAILED ACTION 

Continued Examination 

1 . A request for continued examination under 37 CFR 1.114, including the fee set 
forth in 37 CFR 1.17(e), was filed in this application after final rejection. Since this 
application is eligible for continued examination under 37 CFR 1.114, and the fee set 
forth in 37 CFR 1 .17(e) has been timely paid, the finality of the previous Office action 
has been withdrawn pursuant to 37 CFR 1.114. Applicant's submission filed on 
03/23/2009 has been entered. 

2. Claims 1-18 are pending. Claim 1 is amended by applicants. 

3. The text of those sections of Title 35, U.S. Code not included in this action can 
be found in a prior Office action. 

Response to Arguments 

4. Applicant's arguments filed 03/23/2009 have been fully considered but they are 
moot in view of the new ground(s) of rejection. 

Claim Rejections - 35 USC §103 

5. The following is a quotation of 35 U.S.C. 1 03(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 
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6. Claims 1-3 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Markham et al. (US 7,231 ,664) hereinafter Markham in view of Kadansky et al. (US 
6,295,361) hereinafter Kadansky. 

7. With respect to claim 1 , Markham discloses a first terminal configured to encrypt 
a payload of a broadcast frame and to transmit the broadcast frame (transmitting the 
encrypted data packet from the first node to the second node, col. 2, lines 15-16); and a 
second terminal configured to receive the broadcast frame and to decode the payload of 
the broadcast frame (receiving secure data... decrypting the encrypted data packet, col. 
2, lines 1 7-29), wherein the first terminal is configured to encrypt the payload of the 
broadcast frame using a broadcast encryption key assigned to the first terminal (the 
encrypting of the data packet includes encrypting the data packet using a symmetric 
encryption algorithm... encapsulating the data packet using an Encapsulating Security 
Payload header, col. 6, lines 9-19), the second terminal is configured to decode the 
payload of the broadcast frame using the broadcast encryption key assigned to the first 
terminal (the decrypting of the encrypted data packet includes ... using a group traffic 
encryption key... Encapsulating Security Payload header, col. 7, lines 10-20). 

8. Markham doesn't disclose a terminal that may perform the role of said first and 
second terminals. However, Kadansky discloses any terminal in the plurality of 
terminals may perform the role of said first terminal or said second terminal (see fig. 1 , 
and "A node may be both a sender and a receiver of data to and from other nodes, col. 
1 , lines 29-31 ). It would have been obvious to a person of ordinary skill in the art at the 
time the invention was made to modify Markham with Kadansky to enable first and 
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second terminals have interchangeable role and this allow a terminal to transmit and 
receive data to and from other terminals, see col. 1 , lines 29-31 . 

9. With respect to claim 2, Markham discloses an encryption-key management list 
table having at least an encryption-key management list including a set of a terminal 
identifier of the first terminal and the broadcast encryption key assigned to the first 
terminal ("the group membership table includes group membership information for each 
group... group security information associated with each group", col. 5, lines 32-36 and 
"VPG provides a means of managing keys for the group", col. 3, line 57); means for 
searching the encryption-key management list table based on the terminal identifier of 
the first terminal included in an origination-terminal identifier of the received broadcast 
frame to extract the corresponding broadcast encryption key assigned to the first 
terminal (At 206, the first node checks the group membership table to determine if the 
second (receiving) node is a member of the first group... en crypts a data packet using 
the group security information at 208, col. 5, lines 36-41); and means for decoding the 
payload of the broadcast frame using the extracted broadcast encryption key assigned 
to the first terminal (At 310, the first node decrypts the encrypted data using the group 
security information, col. 6, lines 37-38). 

10. With respect to claim 3, Markham discloses a generated-key table configured to 
store the broadcast encryption key assigned to the first terminal (the group membership 
table includes group membership information for each group... group security 
information associated with each group, col. 5, lines 32-36 and "VPG provides a means 
of managing keys for the group", col. 3, line 57); means for encrypting the payload of 
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the broadcast frame using the broadcast encryption key assigned to the first terminal 
stored in the generated-key table (the encrypting of the data packet includes encrypting 
the data packet using a symmetric encryption algorithm. ..encapsulating the data packet 
using an Encapsulating Security Payload header, col. 6, lines 9-19); and means for 
transmitting the encrypted broadcast frame (transmitting the encrypted data packet from 
the first node to the second node, col. 2, lines 15-16). 

Claim Rejections - 35 USC § 102 

1 1 . Claims 4-1 8 rejected under 35 U.S.C. 1 02(e) as being anticipated by Markham et 
al. (US 7,231 ,664) hereinafter Markham. 

12. With respect to claim 4, Markham discloses a terminal comprising: an encryption- 
key management list table having at least one encryption-key management list 
comprising a set of a terminal identifier of a different terminal and a broadcast 
encryption key assigned to the different terminal (the group membership table includes 
group membership information for each group... group security information associated 
with each group, col. 5, lines 32-36 and "VPG provides a means of managing keys for 
the group", col. 3, line 57); means for searching the encryption-key management list 
table for the encryption-key management list including an origination-terminal identifier 
of a received broadcast frame to extract the corresponding broadcast encryption key (At 
206, the first node checks the group membership table to determine if the second 
(receiving) node is a member of the first group... encrypts a data packet using the group 
security information at 208, col. 5, lines 36-41); and means for decoding a payload of 
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the broadcast frame using the extracted broadcast encryption key (receiving secure 
data. ..decrypting the encrypted data packet, col. 2, lines 17-29). 
13. With respect to claim 5, Markham discloses an encryption-key management list 
table having at least one encryption-key management list configured to store a unicast 
encryption key between said terminal and a different terminal and a broadcast 
encryption key assigned to the different terminal in association with a terminal identifier 
of the different terminal (the group membership table includes group membership 
information for each group... group security information associated with each group, col. 
5, lines 32-36 and "VPG provides a means of managing keys for the group", col. 3, line 
57); means for, when a destination-terminal identifier of a received frame is a broadcast 
address, searching the encryption-key management list table for the encryption-key 
management list including an origination-terminal identifier of the frame to extract the 
corresponding broadcast encryption key as an encryption key, and when the 
destination-terminal identifier of the received frame is other than a broadcast address, 
searching the encryption-key management list table for the encryption-key management 
list including an origination-terminal identifier of the frame to extract the corresponding 
unicast encryption key as the encryption key (At 206, the first node checks the group 
membership table to determine if the second (receiving) node is a member of the first 
group... encrypts a data packet using the group security information at 208, col. 5, lines 
36-41); and means for decoding a payload of the frame using the extracted encryption 
key (receiving secure data... decrypting the encrypted data packet, col. 2, lines 17-29). 
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14. With respect to claim 6, Markham discloses a generated-key table configured to 
store a broadcast encryption key assigned to said terminal ("VPG provides a means of 
managing keys for the group", col. 3, line 57); means for encrypting a payload of a 
broadcast frame using the broadcast encryption key (the encrypting of the data packet 
includes encrypting the data packet using a symmetric encryption 

algorithm... encapsulating the data packet using an Encapsulating Security Payload 
header, col. 6, lines 9-19); and means for transmitting the encrypted broadcast frame 
(transmitting the encrypted data packet from the first node to the second node, col. 2, 
lines 15-16). 

15. With respect to claim 7, Markham discloses a generated-key table configured to 
store a broadcast encryption key assigned to said terminal ("VPG provides a means of 
managing keys for the group", col. 3, line 57); an encryption-key management list table 
having at least one encryption-key management list configured to store a unicast 
encryption key between said terminal and a different terminal in association with a 
terminal identifier of the different terminal (the group membership table includes group 
membership information for each group... group security information associated with 
each group, col. 5, lines 32-36); means for, when a frame to be transmitted is a 
broadcast frame, encrypting a payload of the broadcast frame using the broadcast 
encryption key of the generated-key table, and when the frame to be transmitted is a 
unicast frame, searching the encryption-key management list table for the encryption- 
key management list including a destination-terminal identifier of the unicast frame to 
encrypt a payload of the unicast frame using the corresponding unicast encryption key 
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(the encrypting of the data packet includes encrypting the data packet using a 
symmetric encryption algorithm... encapsulating the data packet using an Encapsulating 
Security Payload header, col. 6, lines 9-19); and means for transmitting the encrypted 
frame (transmitting the encrypted data packet from the first node to the second node, 
col. 2, lines 15-16). 

16. With respect to claim 8, Markham discloses means for encrypting a terminal 
identifier and a broadcast encryption key of the terminal using a unicast encryption key 
assigned to a transmission-destination terminal (the encrypting of the data packet 
includes encrypting the data packet using a symmetric encryption algorithm ... 
encapsulating the data packet using an Encapsulating Security Payload header, col. 6, 
lines 9-19); and means for transmitting the encrypted terminal identifier and broadcast 
encryption key of the terminal to the transmission-destination terminal (transmitting the 
encrypted data packet from the first node to the second node, col. 2, lines 15-16). 

17. With respect to claim 9, Markham discloses an encryption-key management list 
table having at least one encryption-key management list configured to store a 
broadcast encryption key of a different terminal in association with a terminal identifier 
of the different terminal (the group membership table includes group membership 
information for each group... group security information associated with each group, col. 
5, lines 32-36); means for encrypting the encryption-key management list using a 
unicast encryption key assigned to a transmission-destination terminal (the encrypting 
of the data packet includes encrypting the data packet using a symmetric encryption 
algorithm, col. 6, lines 9-19); and means for transmitting the encrypted encryption-key 
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management list to the transmission-destination terminal (transmitting the encrypted 
data packet from the first node to the second node, col. 2, lines 15-16). 

18. With respect to claim 10, Markham discloses means for receiving a terminal 
identifier and a broadcast encryption key of a different terminal from the different 
terminal (receiving secure data. ..decrypting the encrypted data packet, col. 2, lines 17- 
29); means for encrypting the terminal identifier and the broadcast encryption key of the 
different terminal using a broadcast encryption key assigned to the terminal (encrypting 
a data packet using the group security information, col. 2, lines 13-14); and means for 
broadcasting the encrypted terminal identifier and broadcast encryption key of the 
different terminal (broadcast communication within the defined group col. 3, lines 49- 
50). 

19. With respect to claims 1 land 15, Markham discloses searching the encryption- 
key management list table for the encryption-key management list including an 
origination-terminal identifier of a received broadcast frame to extract the corresponding 
broadcast encryption key (At 206, the first node checks the group membership table to 
determine if the second (receiving) node is a member of the first group... encrypts a data 
packet using the group security information at 208, col. 5, lines 36-41); and decoding a 
payload of the broadcast frame using the extracted broadcast encryption key (receiving 
secure data... decrypting the encrypted data packet, col. 2, lines 17-29). 

20. With respect to claims 12 and 16, Markham discloses encrypting a payload of the 
broadcast frame using the broadcast encryption key assigned to said terminal stored in 
the generated-key table (encrypting a data packet using the group security information, 
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col. 2, lines 13-14); and transmitting the encrypted broadcast frame (transmitting the 
encrypted data packet from the first node to the second node, col. 2, lines 15-16). 

21 . With respect to claims 13 and 17, Markham discloses receiving a terminal 
identifier and a broadcast encryption key assigned to a first terminal that are encrypted 
using a unicast encryption key between the first terminal and the second terminal 
(receiving secure data, col. 2, lines 17-29); decoding the encrypted terminal identifier 
and broadcast encryption key assigned to the first terminal using the unicast encryption 
key (decrypting the encrypted data packet, col. 2, lines 17-29); encrypting a terminal 
identifier and a broadcast encryption key of the second terminal using the unicast 
encryption key (encrypting a data packet using the group security information, col. 2, 
lines 13-14); and transmitting the encrypted terminal identifier and broadcast encryption 
key assigned to the second terminal to the first terminal (transmitting the encrypted 
data packet from the first node to the second node, col. 2, lines 15-16). 

22. With respect to claims 14 and 18, Markham discloses receiving a terminal 
identifier and a broadcast encryption key assigned to a first terminal that are encrypted 
using a unicast encryption key between the first terminal and the second terminal 
(receiving secure data, col. 2, lines 17-29); decoding the encrypted terminal identifier 
and broadcast encryption key assigned to the first terminal using the unicast encryption 
key (decrypting the encrypted data packet, col. 2, lines 17-29); encrypting the terminal 
identifier and the broadcast encryption key assigned to the first terminal using a 
broadcast encryption key of the second terminal (encrypting a data packet using the 
group security information, col. 2, lines 13-14); and transmitting the encrypted terminal 
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identifier and broadcast encryption key assigned to the first terminal to a third terminal 
(transmitting the encrypted data packet from the first node to the second node, col. 2, 
lines 15-16). 

Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to SHAHROUZ YOUSEFI whose telephone number is 
(571) 270-3558. The examiner can normally be reached on Monday-Friday 9:00- 
5:00pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Gilberto Barron can be reached on 571-272-3799. The fax phone number 
for the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. 

IS. Y./ 

Examiner, Art Unit 2432 
/Gilberto Barron Jr./ 

Supervisory Patent Examiner, Art Unit 2432 



